IN THE CLAIMS: 



Please AMEND claims 1-2, 4, 7-9, 1 1-16, 18-22, and 25-27, as shown below; and 
Please CANCEL claims 5-6 and 23-24, without prejudice or disclaimer. 

1. (Currently Amended) A method, comprising: 

receiving at a broker a usage policy for constraints related to data of a user in a 
communication system , wherein said usage policy defines at least one strictness level 
parameter value for at least one attribute in the usage policy : 

receiving a request for data associated with the user from a service provider in the 
communication system to the broker, wherein the service provider possesses a privacy 
policy and wherein said request comprises at least one strictness level parameter value for 
at least one attribute in the privacy policy ; 

checking, in the broker, the request against a usage policy of the userjby 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy ; and 

sending a response to the service provider indicating deciding w hether the data can 
be released, based on the comparison of the strictness level parameter values associated 
with attributes in the usage policy to corresponding strictness level parameter values 
associated with corresponding attributes the privacy policy. 
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wherein the privacy policy and the usage policy specify a strictne G G level, selected 
fi om a defined list of strictn e ss lev e ls, describing tho constraints relat e d to the aooesG of 
datar 

2. (Currently Amended) The method of claim 1, further comprising: using the 
user to defme wherein the usage policy for the constraints related to the data is defined by 
the user . 

3. (Previously Presented) The method of claim 1, further comprising: 
providing the broker with a predefined set of privacy policies and usage policies. 

4. (Currently Amended) The method of claim 3, wherein the providing comprises 
providing the privacy policies and the usage policies comprising similar attributes with 
defined strictness level parameter values information element s. 

5-6 (Cancelled) 

7. (Currently Amended) The method of claim S claim 1 . further comprising: 
releasing user data when tbe -each of said at least one strictness level parameter 
value for the at least one attribute of the privacy policies policy of th e servic e provider 
matches with the specified is less than or equal to the corresponding defined strictness 
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level parameter value of the corresponding attribute in at least one of t he received usage 
polici e s policv of th e user . 

8. (Currently Amended) The method of claim 5 claim 1 , further comprising: 
indicating, in the response b y the broker, the-aLStrictness level parameter value of 

the at least one an attribute of the usage policies p olicy of the u s er t o the service provider 
when the at least one corresponding strictness level parameter value of the corresponding 
attribute of the privacy policies policy of the service provider is greater than the indicated 
strictness level parameter value of the attribute in the usage policv doos not match with 
the specified strictness level of the at least one of the usage policie s of the user . 

9. (Currently Amended) The method of claim 5 c laim K further comprising: 
allowing the user to reduce a strictness level parameter value of an attribute in the 

usage policy requirement w hen the corresponding strictness level parameter value of the 
corresponding attribute at least on© of the privacy policies p olicy of the service provider 
is greater than the strictness level parameter value of the attribute in the usage policy to 
be reduced does not match with the specified strictne s s level of the at least one of the 
usage policies of the user . 

10. (Previously Presented) The method of claim 1, further comprising: 
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attaching an electronically signed usage policy to the data when the data is 
released. 

1 1 . (Currently Amended) A system, comprising: 
a service provider possessing a privacy policy; and 

a broker hosting a usage policy for constraints related to data of a use r, vyherein 
said usage policy defines at least one strictness level parameter value for at least one 
attribute in the usage policv. wherein the broker is configured to check a request from the 
service provider against the usage policy of the user bv comparing strictness level 
parameter values associated with attributes in the usage policy to corresponding strictness 
level parameter values associated with corresponding attributes in the privacy policy, 
wherein said request comprises at least one strictness level parameter value for at least 
one attribute in the privacy policy, and the broker is configured to deeida -send a response 
to the service provider indicating w hether data associated with the user can be released in 
response to the request based on the comparison of the strictness level parameter values 
associated with attributes in the usage policy to corresponding strictness level parameter 
values associated with corresponding attributes the privacy policy? 

wherein the usage policy specify a strictness level, selected from a defined list of 
strictness l e vels, describing the constraints related to the access of data . 

12. (Currently Amended) A system, comprising: 
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introducing means for introducing to a broker a usage policy for constraints related 
to data of a use r, wherein said usage policy defines at least one strictness level parameter 
value for at least one attribute in the usage policy : 

receiving means for receiving a request for data associated with the user from a 
service provider to the broke n wherein the service provider possesses a privacy policy 
and wherein said request comprises at least one strictness level parameter value for at 
least one attribute in the privacy policy ; 

checking means for checking, in the broker, the request against a usage policy of 
the use r by comparing strictness level parameter values associated with attributes in the 
usage policy to corresponding strictness level parameter values associated with 
corresponding attributes in the privacy policy ; and 

deciding sending m eans for deciding sending a response to the service provider 
indicating w hether the data can be release d, based on the comparison of the strictness 
level parameter values associated with attributes in the usage policy to corresponding 
strictness level parameter values associated with corresponding attributes the privacy 
policy? 

wherein the usage policy specifies a strictness level, selected from a defined list of 
strictness level s , describing the con s traints related to the access of data , 

13. (Currently Amended) An apparatus, comprising: 
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a receiver configured to receive a request for data associated with a user from a 
service provider , wherein the service provider possesses a privacy policy and wherein 
said request comprises at least one strictness level parameter value for at least one 
attribute in the privacy policy ; and 

a processor configured to check the request against a usage policy of the user_by 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy, wherein said usage policy defines at least one strictness 
level parameter value for at least one attribute in the usage policy and to deeide-senda 
response to the service provider indicating w hether the data can be released , based on the 
comparison of the strictness level parameter values associated with attributes in the usage 
policy to corresponding strictness level parameter values associated with corresponding 
attributes the privacy policy- 

wherein the usage policy specifies a strictness level, selected from a defined list of 
strictness levels, describing constraints related to the access of data . 
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14. (Currently Amended) The apparatus of claim 13, wherein the processor is 
further configured to: 

release user data when each of said at least one strictness level parameter value for 
the at least one attribute p rivacy policy is less than or equal to the corresponding e f4he 
service provider matches with a specified defined strictness level parameter value of the 
corresponding attribute in t he received usage policy of the user . 

15. (Currently Amended) The apparatus of claim 13, wherein the processor is 
further configured to: 

indicate , in the response, the-a^strictness level parameter value of the at least one 
an attribute of the usage policies p olicy of the user to the service provider when the 
corresponding strictness level parameter value of the corresponding attribute at least one 
of the privacy policies policy of the service provider is greater than the indicated 
strictness level parameter value of the attribute in the usage policy docs not match with 
the specified strictne s s level of the at lea s t one of the usage policies of the user . 

16. (Currently Amended) The apparatus of claim 13, wherein the processor is 
further configured to: 

allow the user to reduce a strictness level parameter value of an attribute in the 
usage policy requirement when the corresponding strictness level parameter value of the 
corresponding attribute at least one of the privacy policies p olicy of the service provider 
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is greater than the strictness level parameter value of the attribute in the usage policy to 
be reduced does not match with th e sp e cified striotncGS lovol of the at least one of th e 
usage policies of the user . 

17. (Previously Presented) The apparatus of claim 13, w^herein the processor is 
further configured to: 

attach an electronically signed usage policy to the data w^hen the data is released. 

18. (Currently Amended) An apparatus, comprising: 

receiving means for receiving a request for data associated with a user from a 
service provider , wherein the service provider possesses a privacy policv and wherein 
said request comprises at least one strictness level parameter value for at least one 
attribute in the privacy policy ; 

checking means for checking the request against a usage policy of the userjby 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy^ wherein said usage policy defines at least one strictness 
level parameter value for at least one attribute in the usage policy ; and 

deciding sending means for sending a response to the service provider indicating 
deciding w hether the data can be released , based on the comparison of the strictness level 
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parameter values associated with attributes in the usage policy to corresponding strictness 
level parameter values associated with corresponding attributes the privacy poHcvt 

wherein the usage policy specifies a strictness level, selected from a defined 
ordered list of strictness levels, describing the constraints related to the access of data . 

19. (Currently Amended) A computer-readable medium comprising computer- 
executable components, the components configured to: 

receive a usage policy for constraints related to data of a user in a communication 
system , wherein said usage policy defines at least one strictness level parameter value for 
at least one attribute in the usage policy : 

receive a request for data associated with the user from a service provider in the 
communication system, wherein the service provider possesses a privacy policy and 
wherein said request comprises at least one strictness level parameter value for at least 
one attribute in the privacy policy ; 

check the request against a usage policy of the use r bv comparing strictness level 
parameter values associated with attributes in the usage policy to corresponding strictness 
level parameter values associated with corresponding attributes in the privacy policy ; and 

send a response to the service provider indicating decide w hether the data can be 
released , based on the comparison of the strictness level parameter values associated with 
attributes in the usage policy to corresponding strictness level parameter values 
associated with corresponding attributes the privacy policy^ 
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wherein the privacy policy and the usage policy specify a strictnes s level, selected 
from a defin e d list of strictness l e v e ls, d e scribing the constraints related to the access of 

20. (Currently Amended) The medium of claim 19, wherein the compon e nts are 
configured to: permit the user to define the usage policy for the constraints related to the 
dat ais defined by the user , 

21. (Currently Amended) The medium of claim 19, wherein the components are 
configured to: 

receive a predefined set of privacy policies and usage policies. 

22. (Currently Amended) The medium of claim 21, wherein receiving the 
predefined set comprises receiving the privacy policies and the usage policies comprising 
similar attributes with defined strictness level parameter values information elements . 

23-24 (Cancelled) 

25. (Currently Amended) The medium of claim 23 claim 19 . wherein the 
components are configured to: 
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release user data when each of said t he-at least one strictness level parameter value 
for the at least one attribute of the privacy policies p olicy is less than or equal to the 
correspondine of the service provider matches vyith the specified defined strictness level 
parameter value of the at least one of corresponding attribute in t he received u sage 
policies policv of th e user . 

26. (Currently Amended) The medium of claim 19 claim 23 , wherein the 
components are configured to: 

indicate , in the response, tbe-a^strictness level parameter value of th e at least one 
an attribute of the usage policies p olicy of the user to the service provider when the 
corresponding strictness level parameter value of the corresponding attribute at least one 
of the privacy policies policy of the service provider is greater than the indicated 
strictness level parameter value of the attribute in the usage policy does not match with 
the specified strictness level of the at least one of the usage policies of the user . 

27. (Currently Amended) The medium of claim 19 claim 23 , wherein the 
components are configured to: 

allow the user to reduce a strictness level parameter value of an attribute in the 
usage policy requirement when the corresponding strictness level parameter value of the 
corresponding attribute at least one of the privacy policies policy of the service provider 
is greater than the strictness level parameter value of the attribute in the usage policy to 
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be reduced does not match with the specified strictness level of the at leaat one of th© 
usage policies of the us e r , 

28. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

attach an electronically signed usage policy to the data when the data is released. 
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